Password-based User Authentication

[oliver-pham]

Is your feature request related to a problem? Please describe.

We should ensure that only account owners can access their own accounts.

Are there any related issues? Please list all of them.

• Build Sign In Form #31

Describe the solution you'd like

There are various methods of authentication (e.g. biometric, multi-factor, token-based), but we should go with password-based authentication for now.

• Design a GraphQL schema for a user #36
• Implement a GraphQL query for account authentication

Acceptance criteria

• Frontend can send a request to sign into an account (e.g. with GraphQL mutation)
• Frontend should receive user data & session token if authentication succeeds
• Frontend should receive comprehensive error message if authentication fails (e.g. "Wrong password or email")

Describe alternatives you've considered

N/A

Additional context

• SRS: https://seneca.sharepoint.com/:w:/s/PRJ566NAAFall2021-Team04/EUqySSjxSqJLiVd2OyWDEAABJI8vfO567WsHBpPZmSQWCg?e=FJcwSh
• Apollo Server Auth